Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Jan. 17, 2025, 6:04 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197691 | 10 | 危険 | アップル | - | Windows XP 上で稼動する Apple QuickTime における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2007-6238 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm |
| 197692 | 9 | 危険 | deluxebb | - | DeluxeBB の cp.php における任意のアカウントの電子メールアドレスを変更される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-6237 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm |
| 197693 | 10 | 危険 | ftpdmin | - | FTP Admin の index.php における管理者のアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-6234 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm |
| 197694 | 4.9 | 警告 | ftpdmin | - | FTP Admin の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6233 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm |
| 197695 | 4.3 | 警告 | ftp | - | FTP Admin の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6232 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm |
| 197696 | 7.1 | 危険 | シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) | - | APC AP7932 0u 30amp Switched Rack PDU におけるログインのアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-6226 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm |
| 197697 | 6.5 | 警告 | crm ctt | - | CRM-CTT Interleave の CheckCustomerAccess 関数におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-6222 | 2012-06-26 15:54 | 2007-12-2 | Show | GitHub Exploit DB Packet Storm |
| 197698 | 5 | 警告 | - | KML share の region.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6212 | 2012-06-26 15:54 | 2007-12-4 | Show | GitHub Exploit DB Packet Storm | |
| 197699 | 3.6 | 注意 | Claws Mail | - | claws-mail-tools の sylprint.pl における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2007-6208 | 2012-06-26 15:54 | 2007-12-3 | Show | GitHub Exploit DB Packet Storm |
| 197700 | 5 | 警告 | BEAシステムズ | - | BEA AquaLogic Interaction の Plumtree ポータルの portal/server.pt における有効なユーザ名を列挙される脆弱性 |
CWE-DesignError
|
CVE-2007-6198 | 2012-06-26 15:54 | 2007-12-1 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:Jan. 17, 2025, 5:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 441 | 7.8 |
HIGH
Local |
- | - | Microsoft DWM Core Library Elevation of Privilege Vulnerability New |
CWE-416
Use After Free |
CVE-2025-21304 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 442 | 8.8 |
HIGH
Network |
- | - | Windows Telephony Service Remote Code Execution Vulnerability New |
CWE-122
Heap-based Buffer Overflow |
CVE-2025-21303 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 443 | 8.8 |
HIGH
Network |
- | - | Windows Telephony Service Remote Code Execution Vulnerability New |
CWE-122
Heap-based Buffer Overflow |
CVE-2025-21302 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 444 | 6.5 |
MEDIUM
Network |
- | - | Windows Geolocation Service Information Disclosure Vulnerability New |
CWE-284
Improper Access Control |
CVE-2025-21301 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 445 | 7.5 |
HIGH
Network
-
|
-
|
Windows upnphost.dll Denial of Service Vulnerability
New
|
CWE-400
|
Uncontrolled Resource Consumption
CVE-2025-21300
|
2025-01-15 03:15 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 446 | 7.1 |
HIGH
Local |
- | - | Windows Kerberos Security Feature Bypass Vulnerability New |
CWE-922
Insecure Storage of Sensitive Information |
CVE-2025-21299 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 447 | 9.8 |
CRITICAL
Network
-
|
-
|
Windows OLE Remote Code Execution Vulnerability
New
|
CWE-416
|
Use After Free
CVE-2025-21298
|
2025-01-15 03:15 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 448 | 8.1 |
HIGH
Network |
- | - | Windows Remote Desktop Services Remote Code Execution Vulnerability New |
CWE-416
Use After Free |
CVE-2025-21297 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 449 | 7.5 |
HIGH
Adjacent |
- | - | BranchCache Remote Code Execution Vulnerability New |
CWE-416
Use After Free |
CVE-2025-21296 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 450 | 8.1 |
HIGH
Network |
- | - | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability New |
CWE-416
Use After Free |
CVE-2025-21295 | 2025-01-15 03:15 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |